46 matches found
CVE-2017-8961
creationtimestamp| type| source ---|---|--- 2024-12-28 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-28 2024-12-30 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-30 2025-01-01 00:00:00+00:00| seen| The Shadowserver...
CVE-2024-8961
creationtimestamp| type| source ---|---|--- 2024-11-15 06:51:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113485643524883819 2024-11-15 09:23:49+00:00| seen| https://t.me/cvedetector/11048...
CVE-2024-8961 Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘nomoreitemstext’ parameter in all versions up to, and including, 6.0.7 due to insufficient input sanitization and...
WordPress Essential Addons for Elementor Plugin <= 6.0.7 is vulnerable to Cross Site Scripting (XSS)
Software Essential Addons for Elementor Type Plugin Vulnerable versions = 6.0.7 Fixed in 6.0.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8961 Patch priority Low CVSS severity Low 6.5 Developer WPDeveloper PSID 829106888434 Credits zer0gh0st...
CVE-2019-8961
Flexera FlexNet Publisher lmadmin.exe 11.16.2 is affected by a Denial of Service vulnerability caused by a message reading function that recursively calls itself, leading to stack exhaustion when handling certain messages. An unauthenticated remote attacker can trigger this by sending crafted mes...
dailyforddongnai.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1147910 Security Researcher geeknik Helped patch 8961 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting dailyforddongnai.com websi...
CVE-2020-8961
An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The Self-Protection feature does not prohibit a write operation from an external process. Thus, code injection can be used to turn off this feature. After that, one can construct an event that will modify a file at a specific...
CVE-2020-8961
The CVE-2020-8961 entry relates to Avira Free-Antivirus prior to 15.0.2004.1825, where Self-Protection does not block write operations from external processes. This enables code injection to disable Self-Protection, after which an attacker can craft an event to modify a file at a specific locatio...
genstroitel.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1136227 Security Researcher geeknik Helped patch 8961 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting genstroitel.ru website and...
pibelt.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1131942 Security Researcher geeknik Helped patch 8961 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting pibelt.ru website and its...
Flexera FlexNet Publisher lmadmin < 11.16.5.1 Multiple Vulnerabilities
The Flexera FlexNet Publisher license server manager running on the remote host is affected by multiple vulnerabilities : - A denial of service DoS vulnerability exists in lmadmin due to improper handling of message fragments. An unauthenticated, remote attacker can exploit this issue, via a seri...
softland.cr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1004364 Security Researcher geeknik Helped patch 8961 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting softland.cr website and it...
godsgracepreschool.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-990740 Security Researcher geeknik Helped patch 8961 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting godsgracepreschool.com...
CVE-2017-8961
The CVE-2017-8961 issue affects HPE Intelligent Management Center (IMC) PLAT versions around 7.3 (E0504P02 and related builds), where a directory traversal flaw in the flexFileUpload/FileUploadServlet path handling can enable remote code execution. The root cause is lack of proper validation of u...
HPE Intelligent Management Center PLAT flexFileUpload Arbitrary File Upload (CVE-2017-8961)
An arbitrary file upload vulnerability exists in HPE Intelligent Management Center PLAT. The vulnerability is due to an input validation issue on requests handled by the FileUploadServlet servlet. A remote authenticated attacker could exploit this vulnerability by sending a crafted packet to a...
phpMyAdmin Multiple Vulnerabilities (PMASA-2014-15, PMASA-2014-16) - Linux
phpMyAdmin is prone to multiple cross-site scripting XSS and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
CVE-2016-8961
IBM BigFix Inventory v9 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site...
openSUSE Security Update : phpMyAdmin (openSUSE-SU-2014:1561-1)
phpMyAdmin was updated to fix four security issues. For openSUSE 12.3 and 13.1, phpMyAdmin was updated to 4.1.14.7. For openSUSE 13.2, phpMyAdmin was updated to to 4.2.12. These security issues were fixed : - XSS vulnerability in error reporting functionality CVE-2014-8960. - Local file inclusion...
Fedora Update for phpMyAdmin FEDORA-2014-15538
Check the version of phpMyAdmin SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868533";...
Fedora Update for phpMyAdmin FEDORA-2014-15535
Check the version of phpMyAdmin SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868529";...